PatchTheCVEzeusweb vulnerabilities and fixes
Recent CVEs affecting zeusweb, with upgrade or downgrade steps. 4 tracked.
zeusweb has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-11. Highest priority: CVE-2025-13651 (score 41/100).
- CVE-2025-13651 HIGH 7.5 DOWNGRADE Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web
- CVE-2025-13650 MEDIUM 6.1 DOWNGRADE An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is
- CVE-2025-13649 MEDIUM 6.1 DOWNGRADE An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration
- CVE-2025-13648 MEDIUM 6.1 DOWNGRADE An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration
FAQ
How do I fix zeusweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zeusweb being exploited right now?
None of the tracked zeusweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zeusweb CVE should I patch first?
CVE-2025-13651 currently ranks highest (41/100): Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web.